This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File:                     Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier:          EfXKy5jAdZs7Idgs0Ryxnzg/gXmGJMs1IGT/cYMRk2Y=
Subject key identifier:   5D:E0:8E:94:D4:A5:8F:77:DA:F3:08:A1:E3:0F:AF:62:E6:7A:56:EB
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer:       /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial:       019B348D63F321296A1A17CE7FEFEDF495BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number:          051E
Signing time:             Fri 19 Dec 2025 03:00:39 +0000
Manifest this update:     Fri 19 Dec 2025 03:00:39 +0000
Manifest next update:     Sat 20 Dec 2025 03:00:39 +0000
Files and hashes:         1: TFa2ZOwxN7oGU3_kx6uIZniyCkM.roa (hash: HhfxSeGnWIjZES5ZMXYca+rgo27hAD/QZjezzNFWuIQ=)
                          2: TvEkbwZCtiDMDPynp6wy2daPG_8.roa (hash: 6+0k1c0jemPs8iK4NO+2VO17+OLAQGxnnHN1+3jUmGw=)
                          3: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: RiRohx2ZnyiAyEuosAaVOrs3fQidE3S1Ub6KyxfMEJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:8d:63:f3:21:29:6a:1a:17:ce:7f:ef:ed:f4:95:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
        Validity
            Not Before: Dec 19 03:00:39 2025 GMT
            Not After : Dec 20 03:00:39 2025 GMT
        Subject: CN=5de08e94d4a58f77daf308a1e30faf62e67a56eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:56:c7:3b:d3:33:f4:cb:c5:d5:31:1d:5a:
                    1c:69:02:e4:57:35:7d:33:1b:8a:02:aa:2c:4c:8d:
                    02:67:8d:68:59:a4:23:c7:7c:eb:6a:5e:e7:6d:66:
                    f9:d6:52:5e:e5:0b:41:3f:0e:d5:1e:ed:95:80:58:
                    81:69:ae:ff:48:70:fe:f2:05:4f:64:d2:59:4f:78:
                    e4:be:36:d9:27:07:f4:20:f2:ea:f2:5d:2b:43:07:
                    b3:58:12:49:3d:10:3d:94:e7:8c:11:98:9f:15:de:
                    da:d9:db:dd:3e:95:0c:cc:6c:ac:39:0d:3d:a3:8e:
                    e7:7c:7a:0b:e4:d2:8d:bf:c3:8e:71:1e:a8:24:40:
                    c9:f0:97:41:e9:cb:88:45:d4:71:bb:a8:93:04:ea:
                    ba:59:1a:a1:2a:aa:e4:20:2c:dc:bf:33:f8:34:44:
                    59:46:00:eb:18:d4:08:fa:64:f0:4a:cb:ae:ee:ab:
                    0a:69:b3:61:06:79:0d:77:d6:47:db:fb:07:f0:6d:
                    f4:73:9d:e5:6d:1a:d5:22:f6:af:d8:d6:40:40:b5:
                    e2:2d:69:fd:dd:b4:c7:16:69:47:49:ad:49:b6:61:
                    a0:70:ce:7e:be:9f:d0:d5:2b:d7:b5:c3:ed:3d:ac:
                    1f:53:5f:e4:8d:de:01:90:69:53:62:ac:b0:cb:fa:
                    31:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E0:8E:94:D4:A5:8F:77:DA:F3:08:A1:E3:0F:AF:62:E6:7A:56:EB
            X509v3 Authority Key Identifier:
                keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:43:c4:3d:7a:42:af:b1:7f:9f:a0:02:09:9a:22:ab:44:a0:
         a2:d0:b7:cc:1d:28:f6:70:05:63:e2:3b:59:80:7d:d0:95:45:
         d7:79:42:7b:a5:16:0b:c2:40:3a:75:85:4f:e3:35:5b:59:13:
         23:7c:e0:bc:a3:b8:e8:e2:9c:da:96:24:b2:73:05:b4:6c:05:
         5a:62:fd:09:72:10:76:f4:13:ad:f9:30:81:f6:a7:6e:45:bc:
         83:84:01:45:9f:3b:ac:ef:ff:cc:0b:e1:b6:b8:9c:55:97:f5:
         46:bb:6d:0d:c6:94:3e:e4:32:a3:b8:d7:e6:57:74:d7:5d:c1:
         8d:17:91:e2:98:c3:0c:cb:c8:d5:ee:cf:01:72:4c:f2:c3:15:
         77:d7:16:fa:25:29:35:ac:2d:9f:46:14:ba:dd:22:82:ab:de:
         be:dd:86:ff:b5:6a:5f:5e:c1:1b:81:b7:67:58:58:10:8b:2b:
         d3:04:19:13:71:4d:38:25:ff:a1:6b:65:71:f6:91:0b:d4:de:
         d7:a2:81:04:dd:c1:06:0a:3d:45:3d:9e:b4:d0:37:50:cc:e9:
         40:6c:d5:c9:bc:a5:d0:e5:ca:50:12:31:40:28:d0:9f:28:bb:
         f6:fc:d7:2e:e7:1d:72:30:25:4d:ae:a5:79:7a:e2:45:de:b5:
         f5:ed:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:49:07 2025 by rpki-client